Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FB7342B35F11EDB2CD05ABF1222468.roa
File: 56FB7342B35F11EDB2CD05ABF1222468.roa (raw, json)
Hash identifier: EYWff97uTHV567nIDagUTyS6DVwKIZxJudlMtxq+9wc=
Subject key identifier: 59:F8:E7:90:BA:D4:80:9F:E1:49:1A:0A:2B:92:82:6F:3F:54:CA:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FB7342B35F11EDB2CD05ABF1222468.roa
Signing time: Thu 23 Feb 2023 09:49:18 +0000
ROA not before: Thu 23 Feb 2023 09:49:14 +0000
ROA not after: Mon 23 Oct 2023 09:49:14 +0000
asID: 133199
IP address blocks: 156.245.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7172 (0x1c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:49:14 2023 GMT
Not After : Oct 23 09:49:14 2023 GMT
Subject: CN=63f7369e-257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:8d:ac:f6:5e:27:0b:53:2b:47:6d:1e:a1:
f9:b8:6e:e3:77:4e:b3:a0:c9:e2:f6:92:fd:d7:e3:
e2:ec:4a:cf:e8:b1:56:cf:00:cc:a3:65:e9:73:37:
c4:7e:5c:ba:82:48:1b:3d:38:f6:fd:f2:bc:94:22:
c0:93:be:cb:9d:bd:96:4a:8f:1a:d0:f1:be:a0:c6:
0d:17:bf:fa:fe:1e:56:87:9d:40:cb:e9:ff:5c:37:
5f:3c:3e:39:c2:5b:9e:2c:9c:2e:8e:ed:25:41:50:
15:c9:64:9e:55:e6:c7:ab:0c:2d:d5:14:fe:f9:d5:
42:74:94:76:02:ed:ba:d6:62:c7:bd:5e:8f:8a:1a:
96:3c:67:b3:b7:29:94:3e:00:4e:ae:9a:52:e0:6e:
00:05:24:16:17:9c:31:25:67:a2:fa:10:38:d1:fb:
da:46:47:86:16:63:e9:92:d5:5b:24:d0:76:eb:99:
2f:26:32:a8:94:f3:af:e4:30:9b:2b:91:49:86:53:
1a:09:4b:ac:ac:6c:86:fd:b4:72:1f:20:b6:99:dc:
28:a6:1e:48:ec:58:9d:f0:6a:47:ea:9f:4e:ee:a1:
ae:ab:61:9e:fb:17:dd:3f:60:84:8a:60:5b:6c:a2:
28:c8:af:e5:c5:39:20:f8:3d:2e:26:d5:df:ae:71:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F8:E7:90:BA:D4:80:9F:E1:49:1A:0A:2B:92:82:6F:3F:54:CA:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FB7342B35F11EDB2CD05ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.11.0/24
Signature Algorithm: sha256WithRSAEncryption
62:98:86:1a:f8:e7:bb:9d:63:1d:3e:16:96:43:2a:ac:cc:cc:
c9:64:a6:b9:08:87:47:ba:b2:c6:76:79:8b:ac:6f:20:0f:6b:
ad:d8:d4:21:c4:c2:c9:fe:b4:6e:9b:28:97:b5:41:ad:16:c5:
5f:26:37:cb:c1:d2:6a:3b:e9:40:a1:b4:40:dc:1e:be:cd:e7:
43:3b:04:9c:46:e6:43:02:36:97:85:43:c2:08:4f:67:f1:b7:
ea:68:1a:7f:37:bb:4f:45:e0:83:df:61:11:b6:69:1a:2b:bf:
c2:5d:51:f2:78:32:0b:2b:dd:c9:eb:3c:a0:c0:77:57:83:6c:
64:23:b2:4d:5c:86:3e:d1:eb:68:b3:fd:17:83:b6:54:53:ea:
b0:0b:44:af:7d:80:cf:7d:1c:9f:06:7e:a9:e5:f6:27:6c:b9:
d1:71:fb:ec:2d:c5:fd:7c:cd:8e:86:4c:e8:b3:6d:ba:70:36:
35:87:1e:8f:d6:1f:22:7c:81:f8:1f:52:ff:7a:c4:fc:28:16:
bb:be:86:21:3c:72:d5:8d:62:51:fc:0d:fe:b1:59:b7:98:da:
82:ae:03:b7:29:a8:11:1d:4a:5f:16:0b:57:54:01:69:cd:93:
17:c1:70:20:aa:4c:ba:9b:d4:42:a6:d7:27:f8:90:25:c1:8c:
a3:c6:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:57 2025 by rpki-client